Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/3a05921a-6543-395d-9659-96d79862bab5.roa
File:                     3a05921a-6543-395d-9659-96d79862bab5.roa (raw, json)
Hash identifier:          BjjPnXssDFNZ7TomorCjih8JDuZz9/ZkCCK8U1SC5zc=
Subject key identifier:   67:EC:93:C9:83:5A:EE:6A:7F:CD:8F:7E:18:26:3D:0E:EB:98:6E:43
Certificate issuer:       /CN=b05e76f8-7e37-4663-ae5f-9f03054cfe92
Certificate serial:       010D0C9F432858477230E6D9DE7AAF8BB6967180
Authority key identifier: 34:D0:72:D6:CB:A5:9B:93:4E:96:2F:C0:50:7B:B3:F7:4A:A2:02:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/3a05921a-6543-395d-9659-96d79862bab5.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     399871
IP address blocks:        2606:6040::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:e6:d9:de:7a:af:8b:b6:96:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05e76f8-7e37-4663-ae5f-9f03054cfe92
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=b8b05819-3bc6-4e0a-8cd5-5bc11aba45e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:61:d0:87:23:7d:cb:32:6a:9d:cd:76:65:76:
                    c1:1c:88:c0:60:b4:6b:e8:47:52:50:f0:64:77:19:
                    19:95:4e:be:43:a0:74:c2:33:5b:27:11:b3:b6:c9:
                    ea:b9:7a:24:17:ee:ab:f8:e0:35:4a:3c:fc:ab:20:
                    4d:98:88:47:9e:3c:ec:b7:66:1e:8f:ce:f3:d2:6a:
                    5b:ba:e8:6d:e7:3a:0e:00:83:ba:e2:1c:4a:62:c1:
                    c3:7b:fc:d1:43:20:96:f8:06:f5:4b:bc:b3:69:d6:
                    b2:b3:d6:99:cd:8a:53:fc:3c:1a:03:68:37:e4:5d:
                    89:b0:32:8f:2e:33:7f:69:c7:e9:b1:0b:e7:f4:08:
                    94:10:4a:6b:72:52:d3:f8:15:0f:b4:80:46:5b:82:
                    11:02:77:43:5b:d5:a6:be:ca:90:a6:6d:0b:b3:03:
                    2c:e1:93:5b:c5:a7:18:72:88:aa:36:e9:02:0e:7e:
                    1b:b0:00:38:e2:d2:59:a6:6d:de:97:43:ba:8e:07:
                    6a:4e:28:f1:8c:fb:e1:a1:57:3e:75:9b:05:28:84:
                    a0:02:d4:16:47:68:56:e3:6d:a0:c5:66:22:9c:db:
                    48:79:17:1b:4d:f8:bc:67:7f:cf:41:9c:84:aa:07:
                    30:27:ec:ee:97:bd:fd:34:e9:01:0d:83:9e:b8:a3:
                    52:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EC:93:C9:83:5A:EE:6A:7F:CD:8F:7E:18:26:3D:0E:EB:98:6E:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/3a05921a-6543-395d-9659-96d79862bab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.crl

            X509v3 Authority Key Identifier:
                keyid:34:D0:72:D6:CB:A5:9B:93:4E:96:2F:C0:50:7B:B3:F7:4A:A2:02:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:99:2d:52:f6:92:7c:b7:f3:ee:11:c9:fa:4b:c6:45:3d:c8:
         38:a5:e7:81:2b:69:80:14:e3:e8:58:53:32:09:cc:35:81:15:
         3c:c4:37:d4:f8:a9:6e:d8:e9:00:4c:7a:70:b6:b3:72:44:11:
         1b:0c:ac:80:53:c3:86:a8:63:91:eb:9e:78:a0:f0:c3:35:ca:
         7e:d5:36:04:56:83:7e:81:3c:0b:9a:33:3f:a8:87:c2:76:79:
         32:44:14:18:bb:a1:9c:ae:cc:08:8a:36:c5:6f:7b:43:49:43:
         ce:75:09:b4:52:4c:60:21:18:fb:cc:ac:c7:ef:43:70:1e:7f:
         17:03:20:a9:88:89:bb:f8:76:67:3f:26:ac:ef:0b:49:87:84:
         f8:4f:0c:c6:e7:f3:ea:29:70:d5:0d:9d:cb:71:b5:56:25:f5:
         09:41:7e:c0:c4:83:63:15:41:92:a0:67:1c:83:5e:30:10:57:
         6e:81:2f:a1:77:a5:7a:5a:1b:ad:86:23:1f:d0:ed:0d:82:a9:
         99:a0:00:f7:2c:c3:01:2a:32:a1:e6:e6:91:0c:fa:3b:bf:d5:
         91:c6:bc:46:0d:75:bd:87:d1:28:b1:ea:13:32:73:c6:19:8f:
         c0:6d:24:9f:5c:15:87:74:06:8a:06:e6:75:d7:dd:5f:47:82:
         18:60:e1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:58 2024 by rpki-client on console-ams.rpki-client.org